This Data & Privacy Policy explains how Artcrafture ('we', 'us', or 'our') collects, uses, stores, and protects your personal data when you visit or use our website www.artcrafture.com (the 'Website') or interact with our services. This policy should be read together with our Cookie Policy and Terms and Conditions.
Artcrafture ("we", "us", or "our") is an e-commerce and creative services platform connecting artists, craftspeople, and collectors. We are committed to protecting your personal data and respecting your privacy in full compliance with the EU General Data Protection Regulation (GDPR) 2016/679 and Finnish data protection legislation. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a data subject. It applies to all users of our website at www.artcrafture.com, including buyers (collectors), artists, workshop participants, and general visitors. Please read this policy carefully before using our platform. By registering an account, completing a purchase, or submitting your information through any form on our website, you confirm that you have read and understood this policy.
The data controller responsible for processing your personal data is:
| Name | Rajibul Islam |
|---|---|
| Trading as | Artcrafture |
| Business ID | 3553144-2 |
| Address | Korppaanmäentie 38 C 24, 00300 Helsinki, Finland |
| hello@artcrafture.com | |
| Phone | +358 44 246 5432 |
For all data protection enquiries, corrections, or requests to exercise your rights, please contact us at hello@artcrafture.com with the subject line: DATA PROTECTION REQUEST.
When you register, make a purchase, apply as an artist, or contact us, we may collect:
When you create an account or log in, we collect:
When you purchase or rent an artwork, we collect:
If you register as an artist member, we additionally collect:
When you submit a 'Create Artwork' commission request:
When you register for an event or workshop:
When you use the Contact form:
We automatically collect limited technical data when you visit artcrafture.com:
When you visit our website, we automatically collect certain technical data:
If you choose to sign in using Google, Facebook and Apple OAuth, we receive from Google, Facebook and Apple only the data you have authorised in the Google, Facebook and Apple consent screen, typically your name and email address. We do not receive your Google, Facebook and Apple password.
The table below sets out each category of data we process, why we process it, and the legal basis under GDPR Article 6 that we rely on.
| Data Category | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Account data (name, email, password) | Create and manage your account; enable login and authentication | Art. 6(1)(b) — Performance of contract |
| Delivery address | Fulfil artwork orders and rental deliveries within Finland and internationally | Art. 6(1)(b) — Performance of contract |
| Payment data | Process secure payments via Paytrail or Klarna; verify transactions | Art. 6(1)(b) — Performance of contract |
| Artist profile & portfolio | Display artworks in the marketplace and digital gallery; manage membership and commissions | Art. 6(1)(b) — Performance of contract |
| Commission requests | Facilitate custom artwork orders between collectors and artists | Art. 6(1)(b) — Performance of contract |
| Event registrations | Manage event bookings, issue tickets, send event updates | Art. 6(1)(b) — Performance of contract |
| Contact form messages | Respond to enquiries and provide customer support | Art. 6(1)(f) — Legitimate interests |
| Technical/device data | Ensure website security, diagnose errors, prevent fraud | Art. 6(1)(f) — Legitimate interests |
| Cookie data (analytics, preferences) | Improve website performance; remember your language/currency preferences | Art. 6(1)(a) — Consent (via cookie banner) |
| Marketing communications | Send newsletters or promotional offers about new artworks or events | Art. 6(1)(a) — Consent (opt-in only) |
We do not use your personal data for automated decision-making or profiling that produces legal effects on you.
We do not sell your personal data. We share data only with trusted third parties who are necessary to deliver our services, and only to the extent required:
When you place a commission artwork order, we share your commission instructions and reference images with the relevant artist. We do not share your personal contact details (email, address, phone) with artists without your explicit consent.
We may disclose your personal data to competent authorities (such as the Finnish Tax Administration, law enforcement, or courts) where required to do so by law, regulation, or a valid legal order.
Some of our service providers may process data outside the EU/EEA, in particular Google, Facebook, and Apple (USA). Where this occurs, we rely on the EU Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework as appropriate transfer mechanisms under GDPR Chapter V.
We keep your personal data only for as long as necessary for the purpose it was collected, or as required by Finnish law. The table below summarises our retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account data (name, email, address) | Until account deletion + 1 year | Allow account recovery; legitimate interests |
| Order and transaction records | 7 years | Finnish Accounting Act (Kirjanpitolaki) mandatory requirement |
| Payment processing data | 7 years | Finnish Accounting Act; fraud prevention |
| Artist portfolio and membership data | Duration of membership + 1 year | Contract performance; dispute resolution |
| Commission artwork correspondence | 3 years after completion | Dispute resolution; contract evidence |
| Contact form messages | 2 years | Legitimate interests — responding to queries |
| Cookie consent records | 1 year | Demonstrate GDPR compliance |
| Marketing consent records | Until withdrawal + 3 years | Demonstrate consent was obtained lawfully |
| Website technical logs (IP, access) | 90 days | Security monitoring; fraud detection |
| Deleted account data | 30 days from deletion request | Account recovery grace period |
After retention periods expire, data is securely deleted or anonymised so it can no longer identify you.
Under GDPR, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at hello@artcrafture.com:
Send your request to hello@artcrafture.com with the subject line: DATA PROTECTION REQUEST. Please include your full name and the email address associated with your account so we can verify your identity. We will respond within 30 days as required by GDPR Article 12.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:
No transmission over the internet is 100% secure. If you suspect any unauthorised access to your account, please contact us immediately at hello@artcrafture.com.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:
Artcrafture is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at hello@artcrafture.com so we can delete it.
Our website may contain links to external websites, social media profiles (Instagram, Facebook, Pinterest), and payment provider pages. We are not responsible for the privacy practices of those third-party sites and encourage you to read their respective privacy policies.
We will only send you marketing emails or newsletters if you have explicitly opted in to receive them. You can unsubscribe at any time by:
Unsubscribing from marketing emails does not affect transactional emails relating to orders you have placed, membership status, or event bookings you have registered for.
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. When we make material changes, we will:
Your continued use of our platform after the effective date of an updated policy constitutes your acknowledgement of the changes.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact:
| Name | Rajibul Islam - Artcrafture |
|---|---|
| hello@artcrafture.com | |
| Address | Korppaanmäentie 38 C 24, 00300 Helsinki, Finland |
| Phone | +358 44 246 5432 |
| Website | www.artcrafture.com |
If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority:
| Authority | Office of the Data Protection Ombudsman (Tietosuojavaltuutettu) |
|---|---|
| Website | www.tietosuoja.fi |
| tietosuoja@om.fi | |
| Phone | +358 29 566 6700 |
| Address | PO Box 800, FI-00521 Helsinki, Finland |
This document is effective as of 1 April 2026 and governed by Finnish law and GDPR (EU) 2016/679.
Artcrafture · www.artcrafture.com · Helsinki, Finland
Delivering creativity worldwide
Safe payments with major cards
Exclusive savings for members
Here for you, anytime
Korppaanmäentie 38,
Helsinki, Finland
Y-tunnus: 3553144-2
